HAProxy 2.0 - Hackdot

Re:HAProxy 2.0 by wtarreau on Monday June 17, 2019 @02:04AM (#20200300)

Strange that you see no option for client certs because that has been supported from day one. In addition we even support SNI-based client auth even with wildcard certs. Same for TLS versions and cipher suites.

Further, just look at https://istlsfastyet.com/ and you'll see that haproxy, H2O and nghttpx are the only 3 implementations checking everything (and haproxy was the one inventing dynamic record sizing).

So it seems your opinion on haproxy's TLS support is not that spread!

[ Parent | on HN ]

Re:HAProxy 2.0 by zeeZ on Monday June 17, 2019 @02:32AM (#20200421)

I know haproxy itself supports that and have used those features with static configuration, but does the k8s ingress controller out of the box?

[ Parent | on HN ]

Re:HAProxy 2.0 by wtarreau on Monday June 17, 2019 @03:19AM (#20200641)

I don't know as I have no use for it. Just check the article, it presents some of the things done with the ingress controller, it should answer some of your questions I guess.

[ Parent | on HN ]

Re:HAProxy 2.0 by bedis9 on Monday June 17, 2019 @05:11AM (#20201146)

Yes, it does. We'll blog about those use cases during the summer.

[ Parent | on HN ]